critical10.0
CVE-2024-9985
Enterprise Cloud Database from Ragic does not properly validate the file type for uploads.
Impact
Enterprise Cloud Database from Ragic does not properly validate the file type for uploads. Attackers with regular privileges can upload a webshell and use it to execute arbitrary code on the remote server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ragic | Enterprise Cloud Database | before 2024-08-08 |